Why is an https domain being blocked by the Access-Control-Allow-Origin rule?

Question

In contact with

I've been working on vk.api for maybe two weeks now)))
The crux of the matter is this. I'm trying to get group photos and display them on the site via vk.api. I wrote a php script for this. The whole joke is that if I run this script manually, it works and the data comes in the right format. There are no problems here. But if the request is executed when the site loads, then the Access-Control-Allow-Origin error takes off. And this is despite the fact that the site is on the https protocol and the domain is specified as the base one in the application settings. In the server settings, the Access-Control-Allow-Origin "*" option is specified, and on the site I have already screwed the Instagram API, which works fine. What can be a jamb?

Answer 1

And what about vkontakte? What about app settings?
You are trying to load your script on your server, VK has nothing to do with it at all.
Put a gasket in your php:

<?php header('Access-Control-Allow-Origin: *');  ?>